Secure your account: second factor, passkeys, Google

Your account gives access to what Perimetry Cloud knows about your domains, so protect it with a second factor or a passkey. Everything below is in Settings, card Your account.

Turn on the second factor

1. Install an authenticator app on your phone, if you do not have one yet (any app that reads TOTP codes works).
2. In Settings › Your account › Second factor, press Enable second factor.
3. Scan the QR code with the app, or enter the key by hand.
4. Type the six-digit code the app shows, and press Confirm and enable.

From then on, every sign-in with your password (or with Google) asks for a code from the app. Codes change every 30 seconds and each one can be used only once. There is no way back into the account without the codes: before you confirm, keep a copy of the key (or add it to a second device too), and keep the app on a device you will not lose.

To turn the second factor off, enter your current password and press Disable second factor.

Sign in with a passkey

A passkey lives on your device (phone, computer, security key) or in your password manager, and unlocks with the device’s own lock: fingerprint, face or PIN. Nothing to type, nothing to steal from us: we keep only its public key.

1. In Settings › Your account › Sign-in methods, confirm it is you (your password, an existing passkey, or Google).
2. Give the passkey a name you will recognise (“Work laptop”), and press Add a passkey.
3. Follow your device’s prompt.

To sign in, press Sign in with a passkey on the sign-in page, or pick the passkey your browser suggests in the e-mail field. Because the device checked that it is you, no second-factor code is asked after a passkey.

Lost a device? Remove its passkey from the list in Settings (after confirming it is you): your other sessions are signed out.

Sign in with Google

• Already have an account? Sign in as usual, then in Settings › Your account › Sign-in methods, confirm it is you and press Link a Google account. From then on, Sign in with Google opens your account. The link is to that Google account, whatever its address.
• New to Perimetry Cloud? With a Gmail address, or a Google Workspace account on your company’s domain, Sign up with Google (or Sign in with Google) creates an account for that address once you have named your workspace. It has no password; you can set one later in Settings. With another address, sign up with the address and a password, then link Google.

For your safety, Google never opens an existing account just because the addresses match: if an account already uses the address of your Google account and is not linked to it, you are asked to sign in normally and link Google first. If you turned on the second factor, its code is still asked after Google.

To stop using Google, confirm it is you and press Unlink Google.

Change your password

Enter your current password and the new one (12 characters at least: a passphrase of a few words works well), then press Change password. Your other sessions are signed out.

Forgot it? On the sign-in page, Forgot your password? sends a link valid for one hour, if an account exists for the address. After choosing a new password, all your other sessions are signed out. An account created with Google can use the same link to get a password.

After a reset, we e-mail you a confirmation that lists the passkeys and the Google account that still open your account, and the page shows them right away with a Remove button for each: if the reset was because someone else got in, remove anything you do not recognise.

Change your e-mail address

1. Under E-mail address, enter the new address and your current password, then press Change e-mail address.
2. Open the link we send to the new address (it is valid for one hour), while signed in to this account, and press Use this address.

Your current address is told about the request and about the change, and your other sessions are signed out. Alert channels that sent e-mail to the old address are paused: on the Alerts page, remove them and add the new address instead.

Good to know

• Adding or removing a sign-in method asks you to confirm it is you; the confirmation lasts 10 minutes. The last way to sign in (password, passkey or Google) can never be removed: add another one first.
• After several wrong passwords, codes or passkeys, sign-in pauses for a while (fifteen minutes in most cases). Someone hammering your address from elsewhere cannot lock you out of a device where you already signed in successfully.
• The Activity card in Settings shows the recent actions in the workspace.